CloudFlare and LetsEncrypt

CloudFlare and LetsEncrypt

by Ken Task -
Number of replies: 3
Picture of Particularly helpful Moodlers
The combo of CloudFlare and LetsEncrypt certs is 'popular' for moodles.
An article that crossed my 'radar screen' today might be worth a read if you are using that combo:

https://blog.cloudflare.com/upcoming-lets-encrypt-certificate-chain-change-and-impact-for-cloudflare-customers

'Spirit of Sharing' (SoS), Ken

Average of ratings: Useful (1)
In reply to Ken Task

Re: CloudFlare and LetsEncrypt

by Jon Witts -
Picture of Particularly helpful Moodlers Picture of Plugin developers Picture of Testers
The end date for the cross-signed IdenTrust certificate should be something which is on the calendar for anyone using Let's Encrypt... That said the impact should be pretty negligible...
In reply to Jon Witts

Re: CloudFlare and LetsEncrypt

by Ken Task -
Picture of Particularly helpful Moodlers
LE's bot renews every 4 months. 
So when LE bots renew things should be ok ... understand that.
Am looking at the cert on one of my servers using LE and the ISRG Root X1 tab
I see Validity
Not before: June 2015
Not after: June 2035

Is that where one should look in case of a 'hick up'?

'SoS', Ken

In reply to Ken Task

Re: CloudFlare and LetsEncrypt

by Jon Witts -
Picture of Particularly helpful Moodlers Picture of Plugin developers Picture of Testers
Shouldn't be... the ISRG Root cert will be reissued before its expiry date and all new LE certs will get signed from the updated root... This should be automatic and not affect anyone.

The issue happening on September 30, 2024 is only going to affect those running ancient operating systems (specifically Android pre version 7.1).

Jon
Average of ratings: Useful (1)